Lucene search

FortinetCVELIST:CVE-2021-22125

HistoryJul 20, 2021 - 10:28 a.m.

CVE-2021-22125

2021-07-2010:28:15

fortinet

www.cve.org

fortisandbox

vulnerability

sniffer module

authenticated administrator

command execution

configuration file

CVSS3

6.3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L

EPSS

0.003

Percentile

70.2%

JSON

An instance of improper neutralization of special elements in the sniffer module of FortiSandbox before 3.2.2 may allow an authenticated administrator to execute commands on the underlying system’s shell via altering the content of its configuration file.

CNA Affected

[
  {
    "product": "Fortinet FortiSandbox",
    "vendor": "Fortinet",
    "versions": [
      {
        "status": "affected",
        "version": "FortiSandbox before 3.2.2"
      }
    ]
  }
]

References

fortiguard.com/advisory/FG-IR-21-005

CVSS3

6.3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L

EPSS

0.003

Percentile

70.2%

JSON

Related for CVELIST:CVE-2021-22125